Youzify vulnerabilities

Products

• – Buddypress Community, User Profile, Social Network & Membership Plugin For Wordpress 10
• Youzify 7

Newest

• youzify WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-39780 7.1 HighOctober 6, 2026
• youzify WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability CVE-2026-81275 6.5 MediumSeptember 10, 2026
• youzify WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability CVE-2026-73397 9.8 CriticalAugust 18, 2026
• youzify – buddypress community, user profile, social network & membership plugin for wordpress Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter CVE-2026-1559 6.4 MediumApril 18, 2026
• youzify WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-69014 4.9 MediumDecember 30, 2025
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_li… CVE-2024-13370 6.5 MediumJanuary 25, 2025
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CVE-2024-13368 4.3 MediumJanuary 25, 2025
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion CVE-2024-12113 4.3 MediumJanuary 25, 2025
• kainelabs youzify WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability CVE-2024-39635 5.4 MediumNovember 1, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion CVE-2024-9067 4.3 MediumOctober 10, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode CVE-2024-8987 6.4 MediumOctober 10, 2024
• kainelabs youzify WordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerability CVE-2024-37494 8.5 HighJuly 9, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection CVE-2024-4742 6.5 MediumJune 20, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-47191 6.5 MediumDecember 21, 2023
• kainelabs youzify Youzify < 1.2.2 - Contributor+ Stored XSS CVE-2023-0059 5.4 MediumFebruary 21, 2023
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.2.0 - Unauthenticated SQLi CVE-2022-1950 9.8 CriticalAugust 1, 2022
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography CVE-2021-24443 5.4 MediumAugust 2, 2021